Hashing values using salts and peppers
AssigneeHewlett Packard Enterprise Development LP
InventorsJoseph Wright, Chris Davenport, Andrew Cartes
Life of this patent
Estimating the term…
Abstract
In some examples, a management controller includes a communication interface to communicate with a computing device, where the management controller is separate from a processor of the computing device. The management controller includes a management processor to receive, from the computing device, a first hash value that is based on a first hash function applied on an input value and a salt, generate a second hash value based on applying a second hash function on the first hash value and a pepper, and send the second hash value to the computing device.
Claims8
A method performed by a system comprising a baseboard management controller (BMC), comprising:
- receiving, from a computing device over a secure connection between the BMC and the computing device, a first hash value that is based on a first cryptographic hash function applied on a user credential and a salt, wherein the first hash value is received from the computing device as part of creating a user account to access the computing device;
- generating a second hash value based on applying a second cryptographic hash function on the first hash value and a pepper;
- and
- sending, over the secure connection, the second hash value to the computing device for storage at the computing device and for use in authorizing user access of the computing device.
A system comprising:
- a baseboard management controller (BMC) that includes a physical processor;
- and
- a computing device,
- wherein the BMC is to:
- receive, from the computing device over a secure connection between the BMC and the computing device, a first hash value that is based on a first cryptographic hash function applied on a user credential and a salt, wherein the first hash value is received from the computing device as part of creating a user account to access the computing device;
- generate a second hash value based on causing application of a second cryptographic hash function on the first hash value and a pepper;
- and
- send, over the secure connection, the second hash value to the computing device for storage by the computing device and for use in authorizing user access of the computing device.
Dependencies are inferred from the claim text.